
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
File: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft (raw, json)
Hash identifier: Wwx5UkoJQYSbRFhCfa5m9kktxYFVvuBN0ojAN/RU0fk=
Subject key identifier: F3:0C:D0:A4:47:DD:49:53:B7:8D:A3:96:8E:D8:65:AB:F6:AD:D4:61
Authority key identifier: A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96
Certificate issuer: /CN=A91E0267/serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396
Certificate serial: 3572
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
Manifest number: 3566
Signing time: Tue 28 Jul 2026 14:54:48 +0000
Manifest this update: Tue 28 Jul 2026 14:54:47 +0000
Manifest next update: Tue 04 Aug 2026 14:54:47 +0000
Files and hashes: 1: oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl (hash: FUA0NskjER8dRN/1DJHZKdApgcPNJbZMpT8+Oj0xnyk=)
2: 77C9E89A3CDC11EEBFA0475EC4F9AE02.roa (hash: 0JZgwsnKxNM1tg7k/QVipX++KehbbQu9rlMRlFRcKVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl
rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 14:54:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13682 (0x3572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0267, serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396
Validity
Not Before: Jul 28 14:54:47 2026 GMT
Not After : Aug 4 14:54:47 2026 GMT
Subject: CN=6a68c2b8-e21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:cc:71:e9:77:81:14:85:bf:c0:7d:58:c1:
2b:d3:73:d9:cd:bf:c2:3a:92:8a:0d:3e:d9:70:45:
e6:5f:1f:95:5a:b9:4a:6e:76:b9:0b:2f:02:19:df:
bc:67:70:a2:be:e8:81:96:36:c1:d2:56:42:78:bd:
89:ff:da:f4:32:5b:ce:e4:55:da:4e:25:62:f5:04:
f7:3e:ce:fa:79:00:18:76:aa:96:f8:13:23:5a:32:
6e:49:e6:d6:d3:ac:4a:00:3a:6e:a1:b4:c7:9e:eb:
4e:e8:5c:49:70:4b:6a:35:28:df:c5:de:ce:3b:33:
75:cd:b1:fb:8c:94:08:dd:e4:84:69:ec:57:44:9d:
bc:85:03:44:3c:6b:27:8d:7a:74:6b:fa:9c:b7:b1:
d8:59:cb:8c:15:a3:9c:c8:98:63:a9:54:ab:03:9d:
41:93:c2:e0:21:3b:75:96:d3:ae:01:e6:24:01:4c:
df:f4:c4:38:8e:31:9c:9b:a9:b2:fb:1b:ab:66:63:
42:2f:e7:5a:ea:6b:43:e4:ad:4c:07:ee:8a:50:7f:
81:b4:c9:36:99:54:2b:d4:68:b6:46:d4:58:63:14:
a4:e7:71:68:c8:9a:50:24:c5:da:c3:63:7c:84:d9:
c6:0e:2c:47:a0:49:db:8b:54:b3:3d:e4:ea:64:40:
36:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0C:D0:A4:47:DD:49:53:B7:8D:A3:96:8E:D8:65:AB:F6:AD:D4:61
X509v3 Authority Key Identifier:
keyid:A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:14:a7:ac:ee:85:ef:ec:b6:8f:18:ec:53:b0:23:9c:ce:f9:
98:6d:6a:c6:fe:1d:15:a4:8f:54:f6:51:dc:ba:12:44:1b:e6:
21:62:c4:77:16:30:c7:79:fb:56:ec:ba:c7:42:b4:87:7f:c7:
5a:13:5c:58:79:f5:86:80:69:e6:8f:bd:1f:f8:19:5b:9a:ea:
d0:2e:c7:dc:01:c7:1e:c3:ef:5d:95:f7:58:86:f5:79:05:03:
15:81:56:06:ef:f5:e6:83:06:9d:19:1e:9b:a7:e2:1c:7a:e8:
51:ec:b8:3d:4b:e2:fd:9f:14:9a:e3:e2:fd:12:b9:df:13:7d:
31:15:18:16:c7:1c:8e:fa:9f:92:27:09:2e:b7:03:c3:7e:e8:
79:2e:9b:64:68:b0:d6:d4:b9:25:ae:38:3d:c8:bd:5b:19:d3:
a8:d3:a0:c5:30:51:84:1b:ff:38:60:15:24:08:41:6d:8f:97:
60:7d:2e:96:8e:de:29:d1:6f:e5:51:c3:7a:b1:0b:b2:5b:a9:
22:36:34:6c:ea:70:e4:85:0f:39:8f:0c:21:07:4b:5a:ce:23:
04:71:95:67:06:04:db:59:9c:69:93:3d:5b:57:64:5f:96:dc:
65:1c:e6:c4:b5:ac:b1:2f:68:0c:ac:6e:22:04:cd:4d:44:df:
ec:ec:3f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:16 2026 by rpki-client